Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVEs (45,538)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-4770 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall:...Show more Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.Show less
CVE-2026-57764 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Contributor Cross Site Scripting (XSS) in Surbma \| Yoast SEO Breadcrumb Shortcode <= 1.2 versions.
CVE-2026-57763 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions.
CVE-2026-57762 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.
CVE-2026-57755 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions.
CVE-2026-57754 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.
CVE-2026-57686 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.
CVE-2026-57684 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.
CVE-2026-57682 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
CVE-2026-57678 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS. This issue affects Slider Revolution: from 7.0.0 through 7.0.16.
CVE-2026-57675 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
CVE-2026-57674 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.
CVE-2026-57673 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.
CVE-2026-57672 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.
CVE-2026-57671 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.
CVE-2026-57670 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
CVE-2026-57625 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.
CVE-2026-57426 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.
CVE-2026-57366 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
CVE-2026-57362 - - Jul 2, 2026 Jul 2, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.

Previous 1...202122...2277 Next